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Amendments to the Claims 
This listing of claims will replace all prior versions of claims in the application: 
Listing of Claims: 

1. (Currently Amended) A system that facilitates access to a plurality of shared software 
objects by disparate entities, comprising: 

a platform component that receives a request to access an object by a first entity, wherein 
the first entity is attempting to convert a subscription from a second type of a second entity to a 
type of the first entity; 

a data store that stores security information on classes of the objects, wherein the security 
information includes a security parameter that indicates whether allow ability of the first entity is 
permitted to convert the subscription from the second type to the first type; and 

a verification component that employs the security information to verify that the first 
entity has permission to call an Application Programming Interface (API) for the object ef 
operate on the object to convert the subscription from the second type to the first type , wherein 
the verification component prevents the first entity from calling the API when the security 
parameter indicates that the first entity is not permitted to convert the subscription from the 
second type to the first type and the verification allows the first entity to call the API when the 
security parameter indicates that the first entity is permitted to convert the subscription from the 
second type to the first type . 

2. (Previously Presented) The system of claim 1, the verification component exposes the 
object to the entity if permission exists. 

3. (Previously Presented) The system of claim 1, the verification component masks the 
object from the entity if permission does not exist. 

4. (Original) The system of claim 1, the platform further comprising a Subscription 
Platform Service to facilitate automated billing and provisioning of accounts. 
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5. (Previously Presented) The system of claim 1, the verification component facilitates that 
the entity receive full access to Application Programming Interfaces (API's) and/or objects for 
which there is a business need and partial or limited access to other API's or business objects. 

6. (Original) The system of claim 1, the data store provides default or determined security 
information related to a class. 

7. (Original) The system of claim 6, further comprising a component to override the default 
security information with higher or different security options. 

8. (Previously Presented) The system of claim 1, further comprising a proxy tenant 
component wherein an intermediate entity places calls into a subscription platform service on 
behalf of another entity and achieves access to selected objects in order for the another entity to 
complete a subscription purchase. 

9. (Original) The system of claim 1, further comprising a management portal to facilitate 
authorization of information. 

10. (Original) The system of claim 1, further comprising a component to provide an explicit 
security mapping for an object. 

11. (Original) The system of claim 1, further comprising a component to enable an implicit 
security mapping from an explicitly mapped object or to derive an implied security permission 
by utilizing related objects. 

12. (Original) The system of claim 1, the verification component employs operating system 
identities to facilitate security authorization procedures. 

13. (Original) The system of claim 1, further comprising at least one of a sign-up API caller, 
an account management API caller, and a customer care API caller. 
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14. (Original) The system of claim 13, further comprising at least one API related to at least 
one of a sign-up API group, an account management API group, a customer care API group, and 
an object designer API group. 

15. (Original) The system of claim 1, further comprising authorization logic that determines 
whether an API can access an object via an access rights set. 

16. (Original) The system of claim 1, further comprising at least one of a restricted audience 
offer, a conversion component, and a payment instrument component. 

17. (Cancelled). 

18. (Previously Presented) A method to facilitate security for subscription objects, 
comprising: 

storing one or more security options in a database, the security options related to an 
automated billing and provisioning system, wherein the security options include at least 
conversion of a subscription from a first type associated with a first tenant to a second type 
associated with a second tenant, wherein the security option indicates allow ability of the second 
tenant to convert the subscription type from the first type to the second type; 

assigning the security options to a class; and 

inheriting the security options by object members of the class. 

19. (Original) The method of claim 18, further comprising at least one of explicitly and 
implicitly assigning the security options to the object members of the class. 

20. (Original) The method of claim 18, further comprising accessing the database via an 
application programming interface (API). 

21. (Original) The method of claim 20, further comprising automatically authorizing the API. 
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22. (Original) The method of claim 21, further comprising returning an error code if an 
authorization procedure fails. 

23. (Original) The method of claim 21, further comprising analyzing a simple object access 
protocol request. 

24. (Original) The method of claim 21, further comprising analyzing one or more security 
credentials. 

25. (Original) The method of claim 24, further comprising employing a cache to process the 
credentials. 

26. (Original) The method of claim 1 8, the automated billing and provisioning system 
further comprising a Subscription Platform Service. 

27. (Original) The method of claim 18, the security options are associated with default 
security parameters. 

28. (Original) The method of claim 18, further comprising overriding the default security 
parameters with other security options. 

29. (Original) The method of claim 18, further comprising employing an intermediate proxy 
that places calls into a subscription platform service on behalf of another tenant. 

30. (Previously Presented) A system embodied on a computer readable storage medium to 
facilitate business object security, comprising: 

means for authenticating a first entity attempting access to an online billing and service, 
wherein the first entity is attempting to convert a subscription from a second type of a second 
entity to a type of the first entity; 

means for authorizing the first entity to convert the subscription from a second type of a 
second entity to a type of the first entity upon verifying at least one security parameter, wherein 
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the at least one security parameter includes a security parameter indicates allow ability of the 
first entity to convert the subscription from the second type to the first type. 

3 1 . (Previously Presented) A data packet stored on a computer readable storage medium that 
when transmitted facilitates communications between at least two components of an subscription 
platform service, comprising: 

an Application Programming Interface packet to identify a first partner; 
a security credential packet to facilitate authorization of the first partner; and 
a security parameter packet inherited by a business object to facilitate access to a 
subscription platform database, wherein the security parameter packet includes at least a security 
parameter for conversion of a subscription of a subscriber from a second type associated with a 
second partner to a first type associated with the first partner, wherein the security parameter 
indicates allow ability of the first partner to convert the subscription from the second type to the 
first type. 

32. (Previously Presented) A computer readable storage medium having a data structure 
stored thereon, the data structure comprising: 

at least one security field indicating global security parameters in a subscription platform 
database, wherein the global security parameters include at least a security parameter for 
conversion of a subscription of a subscriber from a first type associated with a first tenant to a 
second type associated with a second tenant, wherein the security parameter for conversion 
indicates allow ability of the second tenant to convert the subscription from the first type to the 
second type; 

at least one object field associated with an account in the database; and 
at least one class field to associate the security field and the object field. 
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